nothumanallowed 16.0.55 → 16.0.56

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nothumanallowed",
-  "version": "16.0.55",
+  "version": "16.0.56",
   "description": "Local AI assistant: 80 tools (Gmail, Calendar, Drive, GitHub, Slack, browser, code, files), 38 agents, visual workflows (Studio, AWF, WebCraft). Install with `npm i -g nothumanallowed`, run with `nha ui`. Free tier built-in (Liara), no API key required. Your data stays on your PC — OAuth tokens local, no cloud. Open-source MIT.",
   "type": "module",
   "bin": {

package/src/constants.mjs

@@ -5,7 +5,7 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
-export const VERSION = '16.0.55';
+export const VERSION = '16.0.56';
 export const BASE_URL = 'https://nothumanallowed.com/cli';
 export const API_BASE = 'https://nothumanallowed.com/api/v1';
 

package/src/services/llm.mjs

@@ -563,6 +563,41 @@ export async function callGrok(apiKey, model, systemPrompt, userMessage, stream
   return data.choices?.[0]?.message?.content || '';
 }
 
+/**
+ * Auto-prefix a model name for OpenRouter. OpenRouter requires `vendor/model`
+ * format (e.g. `anthropic/claude-sonnet-4.5`). Agent cards in NHA often have
+ * bare model names like `claude-sonnet-4-20250514` or `gpt-4o`. Without the
+ * prefix, OpenRouter falls back to an OpenAI-like endpoint that returns a
+ * misleading "Incorrect API key provided" error (it's actually a model
+ * routing issue). We auto-prefix by inspecting the bare model name.
+ */
+export function _autoPrefixOpenRouterModel(model) {
+  if (!model || typeof model !== 'string') return 'anthropic/claude-sonnet-4.5';
+  // Already in vendor/model format — leave alone
+  if (model.includes('/')) return model;
+  const lower = model.toLowerCase();
+  // Anthropic Claude family
+  if (lower.startsWith('claude')) return 'anthropic/' + model;
+  // OpenAI GPT family
+  if (lower.startsWith('gpt') || lower.startsWith('o1') || lower.startsWith('o3') || lower.startsWith('o4') || lower.startsWith('chatgpt') || lower === 'davinci' || lower === 'curie') return 'openai/' + model;
+  // Google Gemini family
+  if (lower.startsWith('gemini') || lower.startsWith('palm')) return 'google/' + model;
+  // Meta Llama family
+  if (lower.startsWith('llama') || lower.startsWith('codellama')) return 'meta-llama/' + model;
+  // DeepSeek
+  if (lower.startsWith('deepseek')) return 'deepseek/' + model;
+  // Mistral / Mixtral
+  if (lower.startsWith('mistral') || lower.startsWith('mixtral') || lower.startsWith('codestral')) return 'mistralai/' + model;
+  // Qwen
+  if (lower.startsWith('qwen')) return 'qwen/' + model;
+  // xAI Grok
+  if (lower.startsWith('grok')) return 'x-ai/' + model;
+  // Cohere
+  if (lower.startsWith('command') || lower.startsWith('cohere')) return 'cohere/' + model;
+  // Unknown vendor — default to anthropic prefix (most likely sandbox use case)
+  return 'anthropic/' + model;
+}
+
 /**
  * OpenRouter — aggregator that exposes 100+ models (Claude, GPT, Gemini,
  * Mistral, Llama, Qwen, DeepSeek, etc.) via a single OpenAI-compatible API.
@@ -570,6 +605,7 @@ export async function callGrok(apiKey, model, systemPrompt, userMessage, stream
  * Model names: "anthropic/claude-sonnet-4.5", "openai/gpt-4o", "google/gemini-2.5-pro"...
  */
 export async function callOpenRouter(apiKey, model, systemPrompt, userMessage, stream = false, opts = {}) {
+  model = _autoPrefixOpenRouterModel(model);
   const body = {
     model: model || 'anthropic/claude-sonnet-4.5',
     max_tokens: opts.max_tokens || 8192,
@@ -594,7 +630,18 @@ export async function callOpenRouter(apiKey, model, systemPrompt, userMessage, s
   });
   if (!res.ok) {
     const err = await res.text();
-    throw new Error(`OpenRouter ${res.status}: ${err}`);
+    // OpenRouter often passes through misleading "platform.openai.com" key errors
+    // when the real cause is (a) invalid OpenRouter key, (b) model name without
+    // vendor prefix, (c) model requires BYOK. Provide an actionable hint.
+    let hint = '';
+    if (res.status === 401) {
+      hint = '\n  → 401 from OpenRouter usually means: (1) your sk-or-v1-... key is invalid/expired (regenerate at openrouter.ai/keys), or (2) the model name "' + model + '" needs a vendor prefix like "anthropic/' + model.replace(/^[a-z-]+\//, '') + '". This call auto-prefixed to "' + model + '".';
+    } else if (res.status === 404) {
+      hint = '\n  → 404 from OpenRouter usually means the model "' + model + '" does not exist. See openrouter.ai/models for valid IDs.';
+    } else if (res.status === 402) {
+      hint = '\n  → 402 from OpenRouter means insufficient credits. Top up at openrouter.ai/credits.';
+    }
+    throw new Error(`OpenRouter ${res.status}: ${err}${hint}`);
   }
   if (stream) return streamSSE(res, 'openai');
   const data = await res.json();
@@ -828,9 +875,12 @@ export async function callLLMWithTools(config, systemPrompt, messages, tools, on
   }
 
   // OpenRouter — uses OpenAI-compatible function calling schema. We reuse the
-  // OpenAI tool-call implementation but point to OpenRouter's endpoint.
+  // OpenAI tool-call implementation but point to OpenRouter's endpoint and
+  // auto-prefix the model (anthropic/, openai/, etc) so bare names from agent
+  // cards work without manual edit.
   if (provider === 'openrouter') {
-    return _callOpenAIWithTools(apiKey, model || 'anthropic/claude-sonnet-4.5', systemPrompt, messages, tools, onText, onToolCall, { ...opts, baseUrl: 'https://openrouter.ai/api/v1', referer: 'https://nothumanallowed.com', xTitle: 'NotHumanAllowed CLI' });
+    const orModel = _autoPrefixOpenRouterModel(model);
+    return _callOpenAIWithTools(apiKey, orModel, systemPrompt, messages, tools, onText, onToolCall, { ...opts, baseUrl: 'https://openrouter.ai/api/v1', referer: 'https://nothumanallowed.com', xTitle: 'NotHumanAllowed CLI' });
   }
 
   // Other providers: fallback to text-based tool calling (old system)